Microsoft Patch Tuesday, August 2025 Edition
Summary: Microsoft's August 2025 Patch Tuesday fixed more than 100 security flaws across Windows and other software, at least 13 of them rated critical. The batch includes CVE-2025-53786, which lets an attacker pivot from a compromised Exchange Server into Exchange Online and other Office 365 services, and CVE-2025-53779, a Kerberos flaw allowing an unauthenticated attacker to gain domain administrator privileges.
What you should know: Researcher Ben McCarthy estimates roughly 29,000 internet-facing Exchange servers are vulnerable to CVE-2025-53786, and fixing it requires manual steps beyond installing the patch - turning an on-premises Exchange breach into a hard-to-detect cloud compromise.